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IN THE CLAIMS 

Please amend chims 3. 6. an .d \ Follnws: _ , _ — 

1, (ORIGINAL) A method of securing a token fitom unauthonztid use, 
compti$ing the steps of: 

receiving a first message cransmicced from a host processing device and addressed to 
a PIN entry device according to a universal serial bu$ (USB) protocol; 
accepting a PIN catered into the PIN entry device; attd 

transmicdng a second message comprising at least a portion of the first message and 
the PIN from the PIN entry device to the token along a secure communication path. 

2, (ORIGINAL) Tlic mctliod of claim 1, wherein: 
the first message is received in the PIN entry device; and 

the second message is transmitted firom the PIN entry device direcdy to the token 
along the secure communicarion path. 

3. (CURRENTLY AMENDED) The medaod of claim 1, wherein: 

the step of receiving the first message transmit: ted firom a host processing device and 
addressed to a PIN entry device comprises die steps of: 

receiving the first message in a USB-compUant hub communicatively coupled 
to the host processing device via a first comii^unication padi^ 

transmitting the first message to die PIN entry device communicatively 
coupled CO the USB-compliant hub; and 

the step of transmitting the second message comprising the portion of the first 
message and the PIN and at least a portion of the first message fiiom the PIN entiy device to 
the token along a sectiie commLinication path comprises the steps of: 

transmitting a second message foom the [[pin]] PIN entry device via the USBr 
compliant hub. 

4. (ORIGINAL) The ixied:iod of claim 3, wherein the step of transmitting the 
second message firom the PIN entry device via the USB-comphant hub comprises the steps 
of: 
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transmitting a thiid message comprisixig the PIN from the PIN entry device to the 
USB-comphant hub; 

processing the message in the USB-compliant hub to produce the second message; 

and 

transmitting the second message from the USB-compliant hub, 

5. (ORIGINAL) The method of claim 1, wherein the signal received from ihe 
host processing device is generated in an API interface. 

6. (CURRENTLY AMENDED) The meihod of claim 1, wherein: 
die first message is encrypted according to a fiist enctypdon key; and 

the [[pin]] PIN entry device comprises a decry pdon module having access to the first 
encrypdon key fox decoding the first message. 

7. (ORIGINAL) The mediod of claim 1, wherein die second message is 
transmitted to the token according to a USB-compliant protocol- 
s' (ORIGINAL) The mediod of daiiti 1 , wherein die second message is 

encrypted according to a second encryption key and the token comprises a decryption 
modiile having access to the second encryption key. 



-3- 

G&iC 30074.29-US-Il 



PAGE 6/20 * RCVD AT 1/7/2004 3:42:43 PM [Eastern Standard Tim^^ 



01-07-2004 12:50PM FROM-Gatss & Cooper LLP 



+13106418798 T-808 P. 007/020 F- 



0' 



9. (ORIGINAL) The method of daim 1, wherein ihe step of txatismitdng the 
second message feom die PIN entry device to die token further comprises the step of: 

encrypdng die second message according to a second enctypdon key stored in die 
PIN entry device and the token; and 

transmitdng the encrypted second message to the token. 

10. (ORIGINAL) The mediod of claim 1, wherein the first message is a 
message transmitted from the host processing device to audiorize a transacdon. 

1 1 . (ORIGINAL) The mediod of claim t , wherein the first message is a 
message transn:utted fix>m the host processing device to authenucate a user of the token. 

12. (ORIGINAL) An apparatus for secuxing a token from unauthon7-ed use, 
comprising: 

a PIN entry device^ communicably coupleablc to a host processing device 
transmitting a first message addressed to die PIN entry device, and commanicadvely 
coupleable to the token according to a universal serial bus USB protocol, the PIN entry 
device comprising; 

a user input device, for accepting a user-iaput PINj and 
a processor, comiTiuoicativcly coupled to the user iaput device, the processor 
for receiving the fksc message and combining the first message with die user-input PINj and 
for producing a second message having at least a pordon of die first message and the user- 
input PIN. 

1 3. (ORIGINAL) The apparams of claim 1 2, wherein the first message is 
encrypted according to a first encryprion key and the PIN entry device further comprises: 

a module for decrypting the first message from die host processing device according 
to a fixst encryprion key. 

14. (ORIGINAL) The apparatus of claim 13, wherein the module is a software 
module having instrucdons stored in a memory accessible to the processor. 
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15. (ORIGINAL) The apparatus o£ claim 14, wherein the PIN eatry device 
fuxthcr comprises: 

a second module for encrypting the second m£!$ssige according to a second 
encryption key. 

16. (ORIGINAL) The apparams of claim 15, wherein the second module is a 
software modxile having instructions stored in a memory accessible to tlic processor. 

17. (ORIGINAL) The appatams of claim 12, wherein the PIN entry device 
furdier comprises an output device for prompting the user to enter the PIN. 

18. (CURRENTLY AMENDED) A method for scctudng a token from 
unauthorized use, comprising: 

intercepting a first message from the host processing device addressed to the token 
in a hub; 

providing die intercepted message to a PIN entry device communicatively coupled co 
•the hub; 

accepting a second message from the PIN entry device comprising a user-entered 

PIN; 

generating a diird message feom die second message, the third message comprising 
the user-entered [[pin]] PTN and at least a poruon of the first message; and 

transmitting the third message &om the USB -compliant hub to the token. 
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19. (ORIGINAL) The method of claim 18, farther comprising ihe step of: 
encrypting the third message according co a first encryption key stored in a memory of the 
token before transmitting the third message to the token. 

20- (ORIGINAL) An apparatus for securing a tolccn from unauthorized use, 
comprising: 

a USB-compliant hub, commuoicably coupleable between a host processing device 
and the token, the USB compliant hub having; 

means for intercepting a message addressed to die PIN oatry device; 
means for generating a third message from the first message and a user- 
entered PIN; and 

means for transmitting the third message to the token; 
a PIN entry device, communicatively coupled to USB-compliant hub, for accepting a 
liser-entered PIN and providing the user-entered PIN to the USB-compliant hub. 

21, (ORIGINAL) The apparams of claim 20, wherein the means for 
intercepting a message addressed to the PIN entry device, the means for generating the thiid 
message from the first message and a user-entered PIN and the means for transmitting the 
third message to tlie token comprises at least one processor having at least one 
communicadvely coupled memory storing processor insmicdons for intercepting a message 
addressed to die PIN entry device, for generating the third message from the first message 
and a user-entered PIN, and for aansnaitting the third message to the token. 

22. (ORIGINAL) The apparatus of claim 20, wherein the USB-compliant hub 
further comprises a means for encrypting the third message according to an enaypdon key 
stored in a memory of the token. 
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23. (ORIGINAL) The apparaius of claim 22, wherein the means for 
intercepting a message addressed to the PIN entiy device, die means for gcneracing the third 
message from tlit! first message and a user-entered PIN, the means for eiiciypting the third 
message according to an encryption key stored in the memory of the token and the means 
for transmitting the third message to the token comprises at least one processor having at 
least one communicatively coupled memory storing processor instructions for intercepting a 
message addressed to die PIN entry device, for generating the third message from the first 
message and a user-entered PIN, for encrypting the daird message according to an 
encryption key stored in the memory of die token and for tiransixiitting the third message to 
the token. 
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